sos-berlin jobscheduler vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows malicious users to inject arbitrary web script or HTML via JSON properties available from the REST API.

Sos-berlin Jobscheduler 1.11 Sos-berlin Jobscheduler 1.13.2

6.5

CVSSv3

A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows malicious users to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial of service.

Sos-berlin Jobscheduler 1.11 Sos-berlin Jobscheduler 1.13.2

6.5

CVSSv3

An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows malicious users to read files from the server via an entity declaration in any of the XML documents that are used to specify the run-time settings of jobs and...

Sos-berlin Jobscheduler 1.11 Sos-berlin Jobscheduler 1.13.2

7.5

CVSSv3

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows malicious users to decrypt the user/password that is optionally stored with a user's profile.

Sos-berlin Jobscheduler

1 Github repository

5.4

CVSSv3

JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-generated documentation for JOC Cockpit. Specifically crafted file names allow an XSS attack to inject code that is executed with the browser. Risk of the vulnerability is considered h...

Sos-berlin Jobscheduler

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook